HardenedBSD-10-STABLE-v46.7 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

* hbsd-update hardening
* netmap fix in e1000 - thx OPNSense

Oliver Pinter (1):
HBSD: remove hbsd-update's dnssec.key* when WITHOUT_HBSD_UPDATE specified

Oliver Pinter + (12):
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master

Shawn Webb (8):
HBSD: Introduce WITH_SHLIBRANDOM.
HBSD: Compile in SHLIBRANDOM by default, but leave it disabled.
HBSD: Build and distribute src.txz in hbsd-update and hbsd-update-build.
HBSD: Perform DNSSEC validation and distribute update hash.
HBSD: Add extra sanity checks with hash validation.
HBSD: Import and validate against the DNSSEC root key.
HBSD: Use the DNSSEC key file in the mountpoint.
HBSD: Remove DNSSEC key 256 as it rotates frequently.

ache (1):
Direct commit of adapted r303581. Fix date.

cy (1):
MFC r303160.

emaste (2):
MFC r303400: libcxxrt: fix demangling of wchar_t
MFC r303338: vt: lock Giant around kbd calls in CONS_GETINFO

jch (3):
MFC r273014:
MFC r271119, r272081:
MFC r286873:

jhb (3):
MFC 302861: Fix rendering issues.
MFC 302899: Add documentation for the sigevent structure.
MFC 303109: Update crashinfo to work with newer gdb from ports.

julian (1):
MFH: r303287

kib (5):
MFC r303090: Ensure that the UFS directory vnode' vm_object is properly sized before UFS_BALLOC() is called.
MFC r303151: Provide counter_warning(9) KPI.
MFC r303211: Implement mtx_trylock_spin(9).
MFC r303424: Fix typo in comment.
MFC r302614: Revive the check, disabled in r197963.

ngie (1):
MFC r288071:

pfg (1):
MFC r302911: mail(1): Avoid closing negative file descriptors.

sbruno (3):
MFC r296063 r297397 r299213
MFC r299829 Use Node Information flag names instead of hard-coding their values.
HBSD MFC: NETMAP related fix in e1000 driver